Password Hacking

[endwarde]

Hey all,

I am a Network Admin for a Win 2003/XP LAN and I am looking for a utility to check my passwords for simplicity and all of that. While I do have an 8 char minimum length on my domain passwords, it isn't realistic to try to impliment "complex passwords" as per the GP option. I would like to see what the password software pulls out as easy to break, and then work with those users to chage their passwords. I am not as familiar with what is used nowadays for this. I used to do this more 4 or 5 years ago on my NT networks, but i know the security has changed around a lot since then.

Anyone have anything they would want to reccommend?

Thanks!

 

[JasonDeckard]

John the Ripper is an excellent (and free) tool for accomplishing your goal:

http://www.openwall.com/john/

 

[Stevehewitt]

I've used CAiN 2.5b a few months ago to do random checks on users passwords.

Be sure to documents all actions, including the time period you know about the password, and possibly export the security logs to ensure user confidentiality!

Steve.

 

[GlenJohnson]

Complex passwords are extremely easy to use. I wrote an article for my company newsletter telling users how to create a very easy to remember but very complex passwords on there own. Users got very good at making a complex password. Here's it in a nutshell.
Igh&d6b@n is a great password.
I=I
g=go
h=home
&=and
d=drink
6=6
b=beers
@=at
n=night.
Igh&d6b@n = I go home and drink 6 beers at night. Who says passwords have to be complex. You can incorporate your favorite car or television program. As long as it's something easy for you to remember. Maybe you like to garden. MfvibfT4l = My favorite vegetable is beefee tomatoes for lunch. Simple. Good luck.

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin check out Tek-Tips in Chicago, Illinois Forum.

TTinChicago

http://www.johnsoncomputers.us

 

[FaiTHLeSS]

L0phtcrack is a good program for auditing passwords

http://www.atstake.com/products/lc/

 

[endwarde]

Thanks for all the suggestions guys. I'll check into these and let you know how it goes.